Would it be possible to have something or a page where we can add keys for the cloudflare turnstile so its shows up on the login screen. Reason I am asking this
Is because the login screen gets attacked by bots. I know the Login with Cfx.re will offer protection for the cfx park. But the Username and Password has none.
I use a cloudflare tunnel so I can have a subdomain and https but I have noticed bots are attacking. Not sure if others have asked about this. I seen information about it online how to implement it but its out of date. I read on other forums people with only http are also being attacked by bots. I have a subdomain for the main server. The one you see in the image is a demo server and offline most of the time and will show the cloudflare Bad gateway page. Its my main one that is being attacked.
#Cloudflare Turnstile
1 messages · Page 1 of 1 (latest)
!domains
!domain
:question: If you want to setup to access txAdmin through a domain (ex http://txadmin.example.com), you have a few options:
:regional_indicator_a: Use Cloudflare's tunnel (recommended):
- Does not require you to open any ports for txAdmin;
- Already comes out of the box with HTTPS/SSL and DDoS Protection;
- You can enable Rate Limiting in Cloudflare's WAF Rules;
- Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/
:regional_indicator_b: Set up a reverse proxy (complicated): - Set up a reverse proxy (caddy/nginx/etc) on port 80/443;
- You can enable HTTPS/SSL or Rate Limiting;
- Then you need to point a domain to your reverse proxy by creating an
Atype record; - For txAdmin to work properly, type
!csrffor more information.
:regional_indicator_c: Just point a domain to it (simple): - In your domain, create an
Atype record pointing to your server IP; - If you want to visit
http://txadmin.example.com/without the port (:40120), you need to change txAdmin to run on port 80, type!convarsfor more info; - This option does not support HTTPS/SSL or Rate Limiting.
I have do that already https://txadmin2.amgrp.co.uk/login and is running as https and works perfectly. I am asking about somethink like you see on my website login screen so we can have a captch with either google or cloudflare https://amgrp.co.uk/wp-login.php
Ok but though I would ask. The txadmin is good and keep up the goodwork.
But the Username and Password has none.
Just to clarify, it very much has brute force protection.
You are only under risk if your password is very weak.
But either ways, I recommend setting up cloudflare tunnel, it's the easiest way to get it secured.
With the tunnel, you can easily put it behind the cloudflare zero trust auth system.